Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [*] Starting reproducer for circular locking dependency in blk_request_module... [+] memfd_create successful, fd=3. [+] ftruncate (16MB) successful. [+] Successfully opened /dev/loop-control. [+] LOOP_CTL_GET_FREE successful, acquired loop0. [+] Successfully opened /dev/loop0. [+] LOOP_SET_FD successful. [+] Backing device ready: major=7, minor=0. [+] mknod successful for /tmp/md125 (major 9, minor 125). [+] Opened /tmp/md125 successfully (major_names_lock -> md_misc_wq chain recorded). [ 132.369239][ T5954] loop0: detected capacity change from 0 to 32768 [+] SET_ARRAY_INFO successful. [ 132.419828][ T5954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.420044][ T5954] block device autoloading is deprecated and will be removed. [+] ADD_NEW_DISK for backing device successful. [+] RUN_ARRAY successful. [*] Sleeping 1s to allow md_start_sync to acquire reconfig_mutex on md_misc_wq... [ 132.550165][ T5954] md/raid1:md125: active with 1 out of 1 mirrors [ 132.550876][ T5954] md125: detected capacity change from 0 to 8192 [*] Issuing ADD_NEW_DISK with MKDEV(0, 0) to trigger lockdep cycle... [ 133.585925][ T5954] [ 133.588593][ T5954] ====================================================== [ 133.595834][ T5954] WARNING: possible circular locking dependency detected [ 133.603639][ T5954] syzkaller #0 Not tainted [ 133.608452][ T5954] ------------------------------------------------------ [ 133.616466][ T5954] syz-executor123/5954 is trying to acquire lock: [ 133.624068][ T5954] ffffffff90960c40 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 133.635711][ T5954] [ 133.635711][ T5954] but task is already holding lock: [ 133.643890][ T5954] ffff8880236d8358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 133.655190][ T5954] [ 133.655190][ T5954] which lock already depends on the new lock. [ 133.655190][ T5954] [ 133.666336][ T5954] [ 133.666336][ T5954] the existing dependency chain (in reverse order) is: [ 133.675636][ T5954] [ 133.675636][ T5954] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 133.684111][ T5954] __mutex_lock+0x197/0x15a0 [ 133.689718][ T5954] md_start_sync+0x179/0x1010 [ 133.695189][ T5954] process_scheduled_works+0xc3d/0x1630 [ 133.701579][ T5954] worker_thread+0xa47/0xfb0 [ 133.706861][ T5954] kthread+0x38b/0x480 [ 133.711953][ T5954] ret_from_fork+0x514/0xb70 [ 133.718437][ T5954] ret_from_fork_asm+0x1a/0x30 [ 133.724151][ T5954] [ 133.724151][ T5954] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 133.733849][ T5954] process_scheduled_works+0xc03/0x1630 [ 133.740858][ T5954] worker_thread+0xa47/0xfb0 [ 133.746547][ T5954] kthread+0x38b/0x480 [ 133.751641][ T5954] ret_from_fork+0x514/0xb70 [ 133.757240][ T5954] ret_from_fork_asm+0x1a/0x30 [ 133.762601][ T5954] [ 133.762601][ T5954] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 133.771480][ T5954] touch_wq_lockdep_map+0xcb/0x180 [ 133.777593][ T5954] __flush_workqueue+0x148/0x10b0 [ 133.783989][ T5954] md_alloc+0x32/0xf20 [ 133.788798][ T5954] md_alloc_and_put+0x1a/0x1f0 [ 133.794333][ T5954] blk_request_module+0x27d/0x2a0 [ 133.800829][ T5954] blkdev_get_no_open+0x3f/0xe0 [ 133.806723][ T5954] blkdev_open+0x1d7/0x600 [ 133.812153][ T5954] do_dentry_open+0x80e/0x1360 [ 133.818756][ T5954] vfs_open_consume+0x4a/0x350 [ 133.824562][ T5954] path_openat+0x16fc/0x20f0 [ 133.831090][ T5954] do_file_open+0x23e/0x4a0 [ 133.840306][ T5954] do_sys_openat2+0x115/0x200 [ 133.846349][ T5954] __x64_sys_openat+0x138/0x170 [ 133.852975][ T5954] do_syscall_64+0x166/0x520 [ 133.858675][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.865931][ T5954] [ 133.865931][ T5954] -> #0 (major_names_lock){+.+.}-{4:4}: [ 133.875973][ T5954] __lock_acquire+0x164c/0x2de0 [ 133.884345][ T5954] lock_acquire+0x115/0x350 [ 133.889857][ T5954] __mutex_lock+0x197/0x15a0 [ 133.895179][ T5954] blk_request_module+0x35/0x2a0 [ 133.900877][ T5954] blkdev_get_no_open+0x3f/0xe0 [ 133.906637][ T5954] bdev_file_open_by_dev+0xa0/0x240 [ 133.912695][ T5954] md_import_device+0x2e9/0x650 [ 133.918640][ T5954] md_add_new_disk+0x669/0x1850 [ 133.925223][ T5954] md_ioctl+0x2005/0x2610 [ 133.930325][ T5954] blkdev_ioctl+0x5e3/0x740 [ 133.935571][ T5954] __se_sys_ioctl+0xfc/0x170 [ 133.941159][ T5954] do_syscall_64+0x166/0x520 [ 133.946650][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.953710][ T5954] [ 133.953710][ T5954] other info that might help us debug this: [ 133.953710][ T5954] [ 133.965082][ T5954] Chain exists of: [ 133.965082][ T5954] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 133.965082][ T5954] [ 133.981652][ T5954] Possible unsafe locking scenario: [ 133.981652][ T5954] [ 133.989398][ T5954] CPU0 CPU1 [ 133.994875][ T5954] ---- ---- [ 134.000383][ T5954] lock(&mddev->reconfig_mutex); [ 134.005445][ T5954] lock((work_completion)(&mddev->sync_work)); [ 134.015017][ T5954] lock(&mddev->reconfig_mutex); [ 134.023278][ T5954] lock(major_names_lock); [ 134.028042][ T5954] [ 134.028042][ T5954] *** DEADLOCK *** [ 134.028042][ T5954] [ 134.036885][ T5954] locks held by syz-executor123/5954: 1, last CPU#0: [ 134.044381][ T5954] #0: ffff8880236d8358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 134.055772][ T5954] [ 134.055772][ T5954] stack backtrace: [ 134.062001][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz-executor123 Not tainted syzkaller #0 PREEMPT(full) [ 134.073598][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.085165][ T5954] Call Trace: [ 134.088712][ T5954] [ 134.091696][ T5954] dump_stack_lvl+0xe8/0x150 [ 134.096353][ T5954] print_circular_bug+0x2e2/0x300 [ 134.101607][ T5954] check_noncircular+0x12f/0x150 [ 134.106766][ T5954] __lock_acquire+0x164c/0x2de0 [ 134.111914][ T5954] ? post_alloc_hook+0x208/0x250 [ 134.116894][ T5954] ? get_page_from_freelist+0x220f/0x2280 [ 134.123116][ T5954] lock_acquire+0x115/0x350 [ 134.127699][ T5954] ? blk_request_module+0x35/0x2a0 [ 134.133663][ T5954] __mutex_lock+0x197/0x15a0 [ 134.139170][ T5954] ? blk_request_module+0x35/0x2a0 [ 134.144929][ T5954] ? lock_acquire+0x115/0x350 [ 134.150007][ T5954] ? blk_request_module+0x35/0x2a0 [ 134.155627][ T5954] ? __pfx___mutex_lock+0x10/0x10 [ 134.160711][ T5954] ? find_inode_fast+0x5dc/0x740 [ 134.165749][ T5954] ? find_inode_fast+0xd2/0x740 [ 134.171108][ T5954] blk_request_module+0x35/0x2a0 [ 134.176384][ T5954] blkdev_get_no_open+0x3f/0xe0 [ 134.181487][ T5954] bdev_file_open_by_dev+0xa0/0x240 [ 134.187015][ T5954] md_import_device+0x2e9/0x650 [ 134.192260][ T5954] md_add_new_disk+0x669/0x1850 [ 134.197876][ T5954] md_ioctl+0x2005/0x2610 [ 134.202760][ T5954] ? tomoyo_path_number_perm+0x219/0x5f0 [ 134.208424][ T5954] ? __pfx_md_ioctl+0x10/0x10 [ 134.213219][ T5954] ? do_vfs_ioctl+0x116f/0x1530 [ 134.218200][ T5954] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.223455][ T5954] ? vfs_write+0x9d5/0xba0 [ 134.227971][ T5954] ? __pfx_md_ioctl+0x10/0x10 [ 134.232880][ T5954] blkdev_ioctl+0x5e3/0x740 [ 134.237454][ T5954] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.243044][ T5954] ? bpf_lsm_file_ioctl+0x9/0x20 [ 134.248025][ T5954] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.253187][ T5954] __se_sys_ioctl+0xfc/0x170 [ 134.258084][ T5954] do_syscall_64+0x166/0x520 [ 134.262889][ T5954] ? trace_irq_disable+0x3b/0x140 [ 134.268390][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.275829][ T5954] ? clear_bhb_loop+0x70/0xc0 [ 134.280741][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.287037][ T5954] RIP: 0033:0x7f4e137daefb [ 134.291504][ T5954] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 134.313052][ T5954] RSP: 002b:00007ffea3973750 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.322221][ T5954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e137daefb [ 134.331725][ T5954] RDX: 00007ffea39737d0 RSI: 0000000040140921 RDI: 0000000000000005 [ 134.341104][ T5954] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 134.349720][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 134.358512][ T5954] R13: 00007ffea3973830 R14: 00007f4e1385fcc0 R15: 0000000000000002 [ 134.367146][ T5954] [ 134.373087][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.373138][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [-] Failed to ioctl(ADD_NEW_DISK): No such device or address [*] Lockdep circular locking dependency warning was triggered in dmesg. [ 134.440477][ T5954] md: could not open device unknown-block(0,0). [ 134.440546][ T5954] md: md_import_device returned -6